Creating https virtual service from devtest portal 10.6

[Deactivated User]

Hi Shankar\Anyone else,

I have been able to follow the below steps and created virtual service, but I still see the created virtual service is of http and not https. I was using RR pair option and using settings option in second screen i added keystore file details by checking the 'Use SSL' server option . Certificate details validated successfully.

I am seeing the following errors in logs

(no date)(no incoming request found)
Incoming request is not HTTP.

Am I missing some step? should i use separate 'project' for deploying https service?

Thanks, Arun
***********************************************************************
HI Arun
      You can use the default keystore that comes with the product.

Filename: LISA_HOME/webserver.ks
Password: changeit
Alias: jetty

regards
Sankar

[Sankar Natarajan]

HI Arun

            No, you dont need a separate project for https services. Please open the created VSM file from Workstation and check the listening step. 

--

regards

Sankar Natarajan

[Deactivated User]

Hi Sankar,

I am not able to find VSM file from Devtest workstation but please find the attached listener step from devtest portal . 

Kindly check and advise on

how to proceed.

Thanks, Arun

[Vaibhav Jain]

Hi Arun,

Check the highlighted box in your vsm : 

If you are not able to find vsm, try below:
1. Download the mar file for the deployed service from portal
2. Open/Extract it with winzip or some similar software
3. You will get a folder structure with .lisa project file, open it in workstation
4. Edit the step and deploy again

Thanks 

------------------------------
Regards,
Vaibhav Jain
Capgemini
------------------------------

[Deactivated User]

Hi Vaibhav,

Thank you for your valuable inputs. I have workstation and devtest portal in different machines and have not explored in devtest workstation.
However I have updated 'Use SSL' checkbox for client and redeployed the service and https service created this time. Thank you so much.

But I have the following issues or queries:-
1. The created https service when I opened browser it says not secure
2. When I clicked on certificate it says 'Certificate can not be verified up to a trusted certification authority'
3. There are two options 'Use SSL' client and 'Use SSL' server , I was earlier using Use SSL server and now as per your instruction I used 'Use SSL' client.
Could you please explain the difference in what scenarios which option should be used and in what scenario both options to be used
4. There are two files 'webreckeys.ks' and 'webserver.ks'. I am using 'webserver.ks' , hope it is not the wrong one.

Kindly answer each point
Thanks, Arun

[Vaibhav Jain]

Hi Arun,

In recording, the SSL handshake is between the client and the SSL server.

Whether to use one of them or both depends on the actual implementation of the service which you are trying to record (one way ssl or two way ssl)

The keystore file must be of PKCS12 or JKS format

Thanks

------------------------------
Regards,
Vaibhav Jain
Capgemini
------------------------------

[Deactivated User]

Hi Vaibhav,

Thanks for quick response

I need it a bit urgent... could you please tell me if webserver.ks can be converted to JKS or PKCS12 or any other way?

Thanks, Arun

[Vaibhav Jain]

Hi Arun,

Also, what exactly are you trying to do? Configure "Use SSL" option in recording for portal?

If yes, use below:

Thanks

------------------------------
Regards,
Vaibhav Jain
Capgemini
------------------------------

[Deactivated User]

Hi Vaibhav,

By following the steps as you described I have created https service but it says not secure when i checked in browser. 

Message reads like this "Certificate can not be verified up to a trusted certification authority" 

Thanks, Arun

[Vaibhav Jain]

Are you getting hits at your service?

Also, as the browser and virtual service host machine are different, you might have to import the necessary certs to establish connectivity. 

Thanks

------------------------------
Regards,
Vaibhav Jain
Capgemini
------------------------------